Re: Re: Security. Allow to run only executables with certain hash

2020-02-29 Thread Dmytro Spivak
I think If somebody would need python or perl language he would have to rewrite the library to allow only certain files to execute. And still he have to rewrite /bin/mv, /bin/cp source code to restrict actions with that library if they (mv, cp) are allowed by the app to execute.

Re: Re: Security. Allow to run only executables with certain hash

2020-02-28 Thread Dmytro Spivak
;ll require hacking: > > https://github.com/skx/linux-security-modules/tree/master/security/can-exec > > In general what you want is hard, you'll need to compromise (no pun > intended), or pay a lot of money to get it developed for you. > > Steve > > On Fri, Feb 28, 2020

Security. Allow to run only executables with certain hash

2020-02-28 Thread Dmytro Spivak
Please make a system app, that will prevent strange executables and wrappers to be launched. For developers: 1. this app must allow an execution only executables with certain hashes and deny execution of files, hashes of which are not prescribed in a control file. 2. the control file (of list of

Re: Security. Allow to run only executables with certain hash

2020-02-28 Thread Dmytro Spivak
sorry, delete, please * after 1-hour living password 2020-02-28 20:22 GMT+02:00, Dmytro Spivak : > Please make a system app, that will prevent strange executables and > wrappers to be launched. > > For developers: > > 1. this app must allow an execution only executables wit